Ohio Transit Risk Pool (OTRP) Member Cybersecurity Compliance Program

The Ohio Transit Risk Pool (OTRP) is seeking a vendor to provide a cybersecurity compliance program for its member agencies. The program should help members comply with new Ohio law to implement core cybersecurity policies, plans, and training. The scope of work includes program setup and pre-assessment, assessment and program build, policy and plan development, exercises, implementation, and roadmaps, and knowledge transfer and sustainability. The contract will be awarded for one year, commencing in 2025. • The program should be scalable across small and mid-sized transit agencies. • The program should align to leading frameworks such as NIST CSF and CIS Controls. • The program should satisfy statutory requirements. • The vendor should provide a clear, logical work plan to complete all required services. • The vendor should have sufficient knowledge in the area of public entities cybersecurity.